CVE-2011-0727

gdm: privilege escalation vulnerability

Severity Score

6.9

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

GNOME Display Manager (gdm) 2.x before 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.

GNOME Display Manager (GDM) v2.x anterior a v2.32.1 permite a usuarios locales cambiar el propietario de archivos arbitrarios mediante un ataque de enlace simbólico en un (1) DMRC o (2) fichero de icono en /var/cache/gdm/.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

Attack Vector

Local

Attack Complexity

High

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-02-01 CVE Reserved
2011-03-28 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-59: Improper Link Resolution Before File Access ('Link Following')

CAPEC

References (21)

URL	Tag	Source
http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.1.news	X_refsource_confirm
http://secunia.com/advisories/44021	Third Party Advisory
http://securitytracker.com/id?1025264	Vdb Entry
http://www.securityfocus.com/bid/47063	Vdb Entry
http://www.vupen.com/english/advisories/2011/0847	Vdb Entry
http://www.vupen.com/english/advisories/2011/0911	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/66377	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://mail.gnome.org/archives/gdm-list/2011-March/msg00020.html	2017-08-17
https://bugzilla.redhat.com/show_bug.cgi?id=688323	2011-03-28

URL	Date	SRC
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057333.html	2017-08-17
http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057931.html	2017-08-17
http://secunia.com/advisories/43714	2017-08-17
http://secunia.com/advisories/43854	2017-08-17
http://www.debian.org/security/2011/dsa-2205	2017-08-17
http://www.mandriva.com/security/advisories?name=MDVSA-2011:070	2017-08-17
http://www.redhat.com/support/errata/RHSA-2011-0395.html	2017-08-17
http://www.ubuntu.com/usn/USN-1099-1	2017-08-17
http://www.vupen.com/english/advisories/2011/0786	2017-08-17
http://www.vupen.com/english/advisories/2011/0787	2017-08-17
http://www.vupen.com/english/advisories/2011/0797	2017-08-17
https://access.redhat.com/security/cve/CVE-2011-0727	2011-03-28

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.0 Search vendor "Gnome" for product "Gdm" and version "2.0"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.2 Search vendor "Gnome" for product "Gdm" and version "2.2"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.3 Search vendor "Gnome" for product "Gdm" and version "2.3"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.4 Search vendor "Gnome" for product "Gdm" and version "2.4"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.5 Search vendor "Gnome" for product "Gdm" and version "2.5"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.6 Search vendor "Gnome" for product "Gdm" and version "2.6"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.8 Search vendor "Gnome" for product "Gdm" and version "2.8"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.13 Search vendor "Gnome" for product "Gdm" and version "2.13"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.14 Search vendor "Gnome" for product "Gdm" and version "2.14"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.15 Search vendor "Gnome" for product "Gdm" and version "2.15"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.16 Search vendor "Gnome" for product "Gdm" and version "2.16"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.17 Search vendor "Gnome" for product "Gdm" and version "2.17"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.18 Search vendor "Gnome" for product "Gdm" and version "2.18"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.19 Search vendor "Gnome" for product "Gdm" and version "2.19"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.20 Search vendor "Gnome" for product "Gdm" and version "2.20"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.21 Search vendor "Gnome" for product "Gdm" and version "2.21"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.22 Search vendor "Gnome" for product "Gdm" and version "2.22"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.23 Search vendor "Gnome" for product "Gdm" and version "2.23"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.24 Search vendor "Gnome" for product "Gdm" and version "2.24"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.25 Search vendor "Gnome" for product "Gdm" and version "2.25"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.26 Search vendor "Gnome" for product "Gdm" and version "2.26"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.27 Search vendor "Gnome" for product "Gdm" and version "2.27"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.28 Search vendor "Gnome" for product "Gdm" and version "2.28"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.29 Search vendor "Gnome" for product "Gdm" and version "2.29"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.30 Search vendor "Gnome" for product "Gdm" and version "2.30"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.31 Search vendor "Gnome" for product "Gdm" and version "2.31"		-		Affected
Gnome Search vendor "Gnome"		Gdm Search vendor "Gnome" for product "Gdm"				2.32 Search vendor "Gnome" for product "Gdm" and version "2.32"		-		Affected